Privacy Policy

This policy explains what personal data Freight My Car collects when you book road transport for a vehicle, why we collect it, who we share it with, how long we keep it, and what rights you have.

It is written to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and — because we move vehicles across borders — reflects the requirements that apply when data leaves the country.

1. What we collect

Information you give us

When you request a quote or make a booking:

• Name, phone number, email address
• Collection and delivery addresses, and any access instructions
• The name and phone number of anyone you nominate to release or receive the vehicle
• Your preferred language

About the vehicle:

• Make, model, year, category, and colour
• Vehicle Identification Number (VIN) and chassis or plate number
• Registration status and declared value
• Whether the vehicle runs, is modified, or has low ground clearance

Documents you upload or send us:

• Vehicle registration card (Mulkiya)
• Emirates ID
• Passport or passport copy
• Export certificate, where the vehicle is being deregistered
• Authorisation letters, where you are not the registered owner
• Any other document a border or customs authority requires for the route

When you pay: billing name and address, payment reference, invoice number.

We do not store full card numbers. Card payments are processed by our payment provider, and we receive only a reference and the outcome.

Information we create

• Your booking reference and its status history
• Condition reports at collection and delivery, including photographs of your vehicle and the signature of the person present
• Internal notes made by our team while handling your booking
• Records of our correspondence with you, including WhatsApp and email

Information we collect automatically

• IP address, browser type, device type, and operating system
• Pages viewed, routes searched, and time spent
• Referring website

We use Google Tag Manager and Google Analytics for this. See section 8.

2. Why we collect it, and our legal basis

We do not sell your personal data. We do not share it with advertisers. We do not use it to build a profile for anyone else's benefit.

3. Who we share it with

Moving a vehicle across a border necessarily means sharing your data with other parties. Specifically:

Hauliers and transport operators

The road transport operator carrying your vehicle receives your name, phone number, the collection and delivery addresses, the vehicle details, and any access instructions. The driver receives what they need to find the vehicle and release it to the right person.

Customs, border, and governmental authorities

To cross a border, we submit the documents that authority requires — which typically includes your Mulkiya, Emirates ID or passport, export certificate, and the vehicle's VIN and details. This applies in the UAE, and in every transit and destination country on the route.

We have no control over what a foreign authority does with data once it is submitted. Their handling is governed by their own law, not by this policy or by UAE law.

Clearing agents and border facilitators

Where we use a local agent to process a crossing, that agent receives the documents needed for the crossing.

Insurers

Where you request transit insurance, or where a claim is made, we share what the insurer needs to underwrite or assess it — including the vehicle details, declared value, and condition reports.

Payment providers

Our payment provider processes your card payment. We share the amount, the reference, and your billing details.

Professional advisers

Our accountants, auditors, and lawyers, where they need it.

Where the law requires it

We disclose data where we are legally obliged to — including to a court, a regulator, or a law-enforcement authority.

4. Where your data goes

Your data is stored on servers in the European Union (our hosting provider's data centre in Germany).

It is also transferred to every country on your route. A movement from Dubai to Riyadh means your documents are submitted to UAE and Saudi authorities. A movement to Amman means UAE, Saudi, and Jordanian authorities.

Some of those countries do not have data protection laws equivalent to the UAE's. By booking a movement, you accept that your data must be transferred to the authorities and agents in the countries on your route in order for the movement to happen. Without that transfer, the vehicle cannot cross the border.

Where we can, we transfer only what the authority actually requires.

5. How long we keep it

Where a claim, dispute, or investigation is open, we keep the relevant data until it is resolved and any appeal period has expired.

6. How we protect it

• Documents are stored on a private, non-public disk — they are not served from a public web address and cannot be reached by guessing a URL.
• Access is restricted to the staff handling your booking.
• The site is served over HTTPS.
• Passwords are hashed; we cannot read them.
• Our systems are patched and monitored.

We cannot guarantee absolute security. No system can. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by UAE law.

7. Your rights

Under UAE Federal Decree-Law No. 45 of 2021, you have the right to:

• Know what data we hold about you, and get a copy of it
• Correct data that is wrong or incomplete
• Delete your data, where we no longer have a lawful reason to keep it
• Restrict how we process it, in certain circumstances
• Object to processing based on our legitimate interests
• Receive your data in a portable format
• Withdraw consent to marketing, at any time

Limits on deletion. We cannot delete data we are legally required to keep — invoices and accounting records, for example, must be retained for five years regardless of any deletion request. We also cannot recall data already submitted to a foreign customs authority.

To exercise a right, email legal@freightmycar.com. We respond within 30 days. We may ask you to verify your identity before we act — precisely because the data includes identity documents.

To complain, you can contact us first, or go directly to the UAE Data Office.

8. Cookies and analytics

Essential cookies — required for the site to function. These keep you signed in, remember your language, and protect forms against cross-site request forgery. They cannot be switched off.

Analytics cookies — Google Analytics, via Google Tag Manager, tells us which routes people search for and where they drop out of the booking flow. This is set only with your consent.

You can refuse non-essential cookies through the banner on your first visit, or clear them in your browser at any time. Refusing analytics cookies does not affect your ability to book.

9. Children

Our services are not directed at anyone under 18, and we do not knowingly collect data from a child. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy. The current version is always published on this page, with the date it was last updated. Where a change materially affects how we use your data, we will tell you.